mirrord

Fixed

• VSCode Extension: Prevent double prompting of the user to select the target if not specified in config. See #1080.

Changed

• JetBrains enable support from 2021.3 (like we had in 3.14.3).

Changed

• mirrord-agent: localhost traffic (like healthprobes) won't be stolen by mirrord on meshed targets to allign behavior with non meshed targets. See #1070
• Filter out agent pods from mirrord ls, for better IDE UX. Closes #1045.
• Not exiting on SIP-check fail. Instead, logging an error and letting the program fail as it would without mirrord.
  See #951.

Fixed

• Fix cache does not work on test-agent workflow. See #251.
• CI: merge queue + branch protection issues

What's Changed

• getsockname now returns the pod's local address by @aviramha in https://github.com/metalbear-co/mirrord/pull/1050
• VSCode extension: update dialog message by @aviramha in https://gxithub.com/metalbear-co/mirrord/pull/1056
• jetbrains: better targets UX by @aviramha in https://github.com/metalbear-co/mirrord/pull/1058
• mirrod-layer: gethostname detour by @DmitryDodzin in https://github.com/metalbear-co/mirrord/pull/1057
• filter adjustments - macOS tmp and fix tmp regex by @aviramha in https://github.com/metalbear-co/mirrord/pull/1062
• internal proxy - remove k8s stuff from layer by @aviramha in https://github.com/metalbear-co/mirrord/pull/1059

Full Changelog: https://github.com/metalbear-co/mirrord/blob/0f07ffcc6f16022767846277a1e70dea6fbd025d/CHANGELOG.md

What's Changed

• Make Dialog list for intellij sorted + add search bar by @infiniteregrets in https://github.com/metalbear-co/mirrord/pull/1034
• mirrord-config: specify custom path for kubeconfig by @infiniteregrets in https://github.com/metalbear-co/mirrord/pull/1036
• remove unused env var MIRRORD_EXTERNAL_ENV by @aviramha in https://github.com/metalbear-co/mirrord/pull/1039
• mirrord-layer: Changed default to read AWS credentials from remote pod. by @aviramha in https://github.com/metalbear-co/mirrord/pull/1038
• remove future limit on JetBrains by @aviramha in https://github.com/metalbear-co/mirrord/pull/1043
• flush after redirect with conntrack by @meowjesty in https://github.com/metalbear-co/mirrord/pull/1035
• Added env guard to be used in cli + extension by @aviramha in https://github.com/metalbear-co/mirrord/pull/1048
• 3.24.0 by @aviramha in https://github.com/metalbear-co/mirrord/pull/1052

Full Changelog: https://github.com/metalbear-co/mirrord/blob/main/CHANGELOG.md

Fixed

• mirrord-config: Fix disabled feature for env in config file, env = false should work. See #1015.
• VS Code extension: release universal extension as a fallback for Windows and other platforms to be used with WSL/Remote development. Fixes #1017
• Fix MIRRORD_AGENT_RUST_LOG can't be more than info due to dependency on info log.
• Fix pause feature not working in extension due to writing to stdout (changed to use trace)

Changed

• DNSLookup failures changed to be info log from error since it is a common case.
• mirrord-agent: now prints "agent ready" instead of logging it so it can't be fudged with RUST_LOG control.
• mirrord-agent: agent::layer_recv changed instrumentation to be trace instead of info.
• mirrord-layer/agent: change ttl of job to be 1 second for cases where 0 means in cluster don't clean up.
• Convert go fileops e2e tests into integration tests. Part of
  #994.

Changed

• Rust: update rust toolchain (and agent rust DOCKERFILE) to nightly-2023-01-31.
• exec/spawn detour refactor #999.
• mirrord-layer: Partialy load mirrord on certian processes that spawn other processes to allow sip patch on the spawned process.
  This to prevent breaking mirrord-layer load if parent process is specified in --skip-processes. (macOS only)

Fixed

• mirrord-layer: DNS resolving doesn't work when having a non-OS resolver (using UDP sockets)
  since /etc/resolv.conf and /etc/hosts were in the local read override,
  leading to use the local nameserver for resolving. Fixes #989
• mirrord-agent: Infinite reading a file when using fgets/read_line due to bug seeking to start of file.
• Rare deadlock on file close that caused the e2e file-ops test to sometimes fail
  (#994).

3.21.0

Added

• Support for Go's os.ReadDir on Linux (by hooking the getdents64 syscall). Part of
  #120.
• Test mirrord with Go 1.20rc3.

Changed

• mirrord-agent: Wrap agent with a parent proccess to doublecheck the clearing of iptables. See #955
• mirrord-layer: Change HOOK_SENDER from Option to OnceLock.

Fixed

• mirrord-agent: Handle HTTP upgrade requests when the stealer feature is enabled
  (with HTTP traffic) PR #973.
• E2E tests compile on MacOS.
• mirrord could not load into some newer binaries of node -
  #987. Now hooking also posix_spawn, since node now uses
  libuv's uv_spawn (which in turn calls posix_spawn) instead of libc's execvp (which calls execve).
• Read files from the temp dir (defined by the system's TMPDIR) locally, closes
  #986.

Added

• Support impersonation in operator

Fixed

• Go crash in some scenarios #834.
• Remove already deprecated --no-fs and --rw options, that do not do anything anymore, but were still listed in the
  help message.
• Bug: SIP would fail the second time to run scripts for which the user does not have write permissions.

Changed

• Code refactor: moved all file request and response types into own file.

3.19.1

Fixed

• Changelog error failing the JetBrains release.

3.19.0

Changed

• mirrord-operator: replace operator api to use KubernetesAPI extension. #915

Fixed

• tests: flaky passthrough fix. Avoid 2 agents running at the same time, add minimal sleep (1s)
• macOS x64/SIP(arm): fix double hooking fstatat$INODE64. Possible crash and undefined behavior.

Added

• introduce mirrord-console - a utility to debug and investigate mirrord issues.

Fixed

• crash when getaddrinfo is bypassed and libc tries to free our structure. Closes #930
• Stealer hangs on short streams left open and fails on short closed streams to filtered HTTP ports -
  #926.

Fixed

• Issue when connect returns libc::EINTR or libc::EINPROGRESS causing outgoing connections to fail.
• config: file config updated to fix simple pattern of IncomingConfig. #933

Added

• Agent now sends error encountered back to layer for better UX when bad times happen. (This only applies to error happening on connection-level).
• Partial ls flow for Go on macOS (implemented fdopendir and readdir_r). Closes #902
• New feature: HTTP traffic filter!
  • Allows the user to steal HTTP traffic based on HTTP request headers, for example Client: me would steal requests that match this header, while letting unmatched requests (and non-HTTP packets) through to their original destinations.

Fixed

• Update the setup-qemu-action action to remove a deprecation warning in the Release Workflow
• stat functions now support directories.
• Possible bugs with fds being closed before time (we now handle dup'ing of fds, and hold those as ref counts)

Changed

• agent: Return better error message when failing to use PACKET_IGNORE_OUTGOING flag.

Added

• Add brew command to README

Fixed

• intellij plugin: mirrord icon should always load now.
• intellij plugin: on target selection cancel, don't show error - just disable mirrord for the run and show message.
• fixed setting a breakpoint in GoLand on simple app hanging on release build (disabled lto). - Fixes #906.

Deprecated

• Removed disabled in favor of local in fs configuration.

Changed

• update kube dependency + bump other
• update dlv packed with plugins.

Fixed

• Add go to skipped processes in JetBrains plugin. Solving GoLand bug.

Fixed

• Running on specific Kubernetes setups, such as Docker for Desktop should work again.

Added

• Add golang stat hooks, closes #856

Fixed

• Error on specifying namespace in configuration without path (pod/container/deployment). Closes #830
• IntelliJ plugin with new UI enabled now shows buttons. Closes #881
• Fix deprecation warnings (partially), update checkout action to version 3.

Added

• Logging for IntelliJ plugin for debugging/bug reports.

Fixed

• Crash when mirroring and state is different between local and remote (happens in Mesh).
  We now ignore messages that are not in the expected state. (as we can't do anything about it).
• agent: Fix typo in socket path for k3s environments
• intellij-plugin: fix missing telemetry/version check

Added

• Add __xstat hook, fixes #867

Fixed

• Fix build scripts for the refactored IntelliJ plugin